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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address ■■ 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )[3 Responsive to communication(s) filed on 06 March 2000 and 12 March 2001 . 
2a)D This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD, 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 28-53 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) E3 Claim(s) 28-53 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) ^3 The specification is objected to by the Examiner. 

10)[3 The drawing(s) filed on 12 March 2001 is/are: a)D accepted or b)K objected to by the Examiner. 
Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1 .121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
Priority under 35 U.S.C. §§ 119 and 120 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a)n All b)D Some*c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

13) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional application) 

since a specific reference was included in the first sentence of the specification or in an Application Data Sheet. 
37 CFR 1.78. 

a) D The translation of the foreign language provisional application has been received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 since a specific 

reference was included in the first sentence of the specification or in an Application Data Sheet. 37 CFR 1 .78. 



Attachment(s) 

1) [3 Notice of References Cited (PTO-892) 

2) O Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) ^ Information Disclosure Statement(s) (PTO-1449) Paper Note) 4. 5.6.9 . 



4) □ Interview Summary (PTO-413) Paper No(s). 

5) □ Notice of Informal Patent Application (PTO-152) 

6) □ Other: 
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DETAILED ACTION 



1. Claims 28-53 have been examined. Claims 1-27 have been cancelled by 
preliminary amendment 



2. The drawings are objected to as failing to comply with 37 CFR 1 ,84(p)(5) 
because they do not include the following reference sign(s) mentioned in the 
description: item "712" in figure 7B. A proposed drawing correction or corrected 
drawings are required in reply to the Office action to avoid abandonment of the 
application. The objection to the drawings will not be held in abeyance. 

3. The drawings are objected to as failing to comply with 37 CFR 1 .84(p)(5) 
because they include the following reference sign(s) not mentioned in the description: 
item "162" on page 7, lines 15 and 16 and page11, line 18; and item "702" on page 16, 
line 1 1 . A proposed drawing correction, corrected drawings, or amendment to the 
specification to add the reference sign(s) in the description, are required in reply to the 
Office action to avoid abandonment of the application. The objection to the drawings will 
not be held in abeyance. 



Drawings 



Specification 



• 



Application/Control Number: 09/519,829 



Page 3 



Art Unit: 2134 

4. The use of the trademarks Microsoft™, Windows NT™, UNIX™, Linux™, and 
NetWare™ has been noted in this application. It should be capitalized wherever it 
appears and be accompanied by the generic terminology. 

Although the use of trademarks is permissible in patent applications, the 
proprietary nature of the marks should be respected and every effort made to prevent 
their use in any manner which might adversely affect their validity as trademarks. 



The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 



5. Claims 37-39 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Australia Patent Application No. 63545/98 from Schmitz. 

As per claims 37 and 39, Schmitz discloses a method in which the user of a 
device sends the qualifying identification (passcode) to an authorization computer, 
which generates a new TAN and sends it to the user in response to the request. The 
TAN created in the system disclosed by Schmitz functions as a temporary account that 
is activated upon the initial user request (see page 13, line 20 to page 14, line 10). 

As per claim 38, the TAN may only be active for a predetermined amount of time 
(see page 18, lines 1-7). 



Claim Rejections - 35 USC § 102 



States. 
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Claim Rejections - 35 USC § 103 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claims 28-36 and 40-53 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Australia Patent Application No. 63545/98 from Schmitz in view of 
Menezes, "Handbook of Applied Cryptography," 1997, p. 390. 

As per claims 28, 34, 35, 40, 41, and 43-53, Schmitz discloses a method in which 
the user of a device sends the qualifying identification (passcode) to an authorization 
computer, which generates a new TAN (token) and/or a password and sends them to 
the user in response to the request, who then transmits the password back to the 
authorization computer as part of a transaction or login (see page 13, line 20 to page 
14, line 10). 

Though Schmitz discloses that the authorization computer creates a password, 
no method for creating the password is taught. 

Menezes discloses that a password may be augmented with a random string, 
called a "salt," along with a hashing function, in order to make dictionary attacks less 
effective (see section (v)), and further notes that an entity's ID can be used as a salt. 
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Therefore, it would be obvious to one of ordinary skill in the art at the time the 
invention was made to modify the system disclosed by Schmitz by creating a password 
by using the user's password information in addition to an ID for the device (the token), 
using a hashing function, as disclosed by Menezes, in order to make dictionary attacks 
less effective. 

As per claims 30, 31 , 36, 42, Schmitz discloses that the user requests the token 
through the data input apparatus. 

As per claims 32 and 33, Schmitz discloses that the device can be a pager or 
phone (see page 15, lines 24-29). Official notice is given that the reference to "handy" 
teaches to a mobile phone. 

Conclusion 

7. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

U.S. Patent No. 5,153,919 to Reeds, III et al. discloses the creation of a 
password for a cell phone derived from a cell user's password and a salt. 

U.S. Patent No. 5,497,41 1 to Pellerin discloses a procedure for user validation 
using a PIN. 

U.S. Patent No. 5,875,394 to Daly et ai. discloses a mutual authentication 
procedure for cell phones that uses two passwords together. 
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U.S. Patent No. 5,956,633 to Janhila discloses operator specific passwords 
created from multiple pieces of user information in a cell network. 



8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Matthew E. Heneghan, whose telephone number is 
(703) 305-7727. The examiner can normally be reached on Monday-Thursday from 
8:00 AM - 4:00 PM Eastern Time. The examiner can also be reached on alternate 
Fridays. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory Morse, can be reached on (703) 308-4789. 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, DC 20231 
Or faxed to: 

(703) 872-9306 

Hand-delivered responses should be brought to Crystal Park 2, 2121 Crystal 
Drive, Arlington, VA 22202, Fourth Floor (Receptionist). 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 

MEH Jrsf s GREGORY MORSE 

SUPERVISORY PATENT EXAMINER 
December 4, 2003 TECHNOLOGY CENTER 2100 



